PT-2026-30257 · Undefined · Undefined

Published 2026-04-03 · Updated 2026-04-03 · CVE-2017-20233

NVD

CVSS v3.1

5.4

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Hirschmann HiLCOS products OpenBAT, BAT450, WLC, BAT867 contains a firewall filtering vulnerability that fails to correctly filter IPv4 multicast and broadcast traffic when management IP address filtering is disabled, allowing configured filter rules to be bypassed. Attackers with network access can inject or observe multicast and broadcast packets that should have been blocked by the firewall.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2017-20233

Affected Products

Undefined

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-20233 · Security Note
• https://vulncheck.com/advisories/hirschmann-hilcos-layer-2-firewall-multicast-broadcast-traffic-bypass · Note
• https://assets.belden.com/m/11a07596f0bf1018/original/Security-Bulletin-IPv4-Multicast-HiLCOS-Layer-2-Firewall-BSECV-2017-03.pdf · Note